Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9: Redis High Remote Exec Risk Advisory MGASA-2025-0307

mageia
Calendar Grey November 21, 2025
Dist Mageia Esm H88
Updated redis packages in Mageia address critical security issues, including remote code execution and integer overflow risks.
MGASA-2025-0307 - Updated redis packages fix security vulnerabilities

Summary

Description: A Lua script may lead to remote code execution. (CVE-2025-49844) A Lua script may lead to integer overflow and potential RCE. (CVE-2025-46817) A Lua script can be executed in the context of another user. (CVE-2025-46818) LUA out-of-bound read. (CVE-2025-46819)

References

- https://bugs.mageia.org/show_bug.cgi?id=34650

- https://www.openwall.com/lists/oss-security/2025/10/07/2

- https://github.com/redis/redis/releases/tag/7.2.11

- https://github.com/redis/redis/releases/tag/7.2.12

- https://www.cve.org/CVERecord?id=CVE-2025-49844

- https://www.cve.org/CVERecord?id=CVE-2025-46817

- https://www.cve.org/CVERecord?id=CVE-2025-46818

- https://www.cve.org/CVERecord?id=CVE-2025-46819

Topics%20covered

Topics Covered

security advisory security issue remote code execution integer overflow redis Mageia

Resolution

SRPMS

- 9/core/redis-7.2.12-1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 21 Nov 2025
URL: https://advisories.mageia.org/MGASA-2025-0307.html
Type: security
CVE: CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819

Topics%20covered

Topics Covered

security advisory security issue remote code execution integer overflow redis Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here